Static task
static1
Behavioral task
behavioral1
Sample
b70f25235b232a4a9ec6c67f72eb9548_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b70f25235b232a4a9ec6c67f72eb9548_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b70f25235b232a4a9ec6c67f72eb9548_JaffaCakes118
-
Size
5.4MB
-
MD5
b70f25235b232a4a9ec6c67f72eb9548
-
SHA1
29cde361ac7d6de62542112b8999b60b4aa5f2e7
-
SHA256
ac17dc5b9a7330db16823436be807e4abc78b67590a55dcf5ec01a6895b82957
-
SHA512
e156ac4f3346fcd43c2b96a2983751912c9e7c1c250cb7ab4aabe2eebfdcbf5d31dc56f68456cd1a057e427e90e94187e8e4586199218de2f0ff3b7f44045f50
-
SSDEEP
98304:s+dwBG/4IUq4YdxpgDgEXYr2UVkv8693/lqoSRmGffC03Qg0DqE3vIpe:fwBGwI94YdADgEoSEkp9tqoEmGf3svH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70f25235b232a4a9ec6c67f72eb9548_JaffaCakes118
Files
-
b70f25235b232a4a9ec6c67f72eb9548_JaffaCakes118.exe windows:6 windows x64 arch:x64
c620110dbfa9ec87326729b63b6c9f61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetConsoleTextAttribute
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetCursor
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
msvcp140d
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
urlmon
URLDownloadToFileW
wininet
InternetReadFile
imm32
ImmGetContext
vcruntime140d
__std_type_info_destroy_list
vcruntime140_1d
__CxxFrameHandler4
ucrtbased
ceil
wtsapi32
WTSSendMessageW
Sections
.textbss Size: - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: - Virtual size: 413B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ